4,753 reputation
2828
bio website cgi.com/securitylab
location Ottawa, Canada
age 36
visits member for 2 years, 7 months
seen May 13 at 0:41

Common Criteria professional working for CGI Canada's Security Evaluation and Testing Lab within the Canadian CC Scheme. If you want more information about what CC or FIPS can do for your product and business, feel free to drop me a line.


Jul
18
revised Citation Needed for FIPS Anecdote Regarding MD5 and RC4
Added information re: RC4
Jul
18
revised Citation Needed for FIPS Anecdote Regarding MD5 and RC4
Adding extra info to discuss differences b/w SSLv3 and TLS use of MD5 from IG.
Jun
30
revised What drives FIPS140-2 compliance?
added 8 characters in body
Jun
30
revised What drives FIPS140-2 compliance?
edited tags
Jun
29
revised What can an attacker do with a stolen SSL private key? What should the web admin do?
edited title
Jun
29
revised Are there any FIPS140-2 requirements that apply when boot code is updated in the field?
edited tags
Jun
29
revised Evaluating hosting providers for CC development environment
added 87 characters in body
Jun
28
revised Inner Workings of Public Key Encryption
deleted 18 characters in body
Jun
28
revised Inner Workings of Public Key Encryption
Added clarification to sessions and expirations.
Jun
28
revised Inner Workings of Public Key Encryption
Added additional information pertaining to the video as well as importance of DH for exchanging secrets.
Jun
20
revised How can end-users detect malicious attempts at SSL spoofing when the network already has an authorized SSL proxy?
The actual question, I feel (buried under a rant).
Jun
18
revised What value security wise, if any, does a digital handwritten signature have?
To differentiate b/w actual digital signature algorithms and handwritten sigs.
May
9
revised If someone bought the .local TLD could that be a security risk?
Adding addendum explaining similarity metrics.
Apr
21
revised Convert RSA public key to the right format
Pulling in potential answer from stack overflow for ease of reference.
Apr
20
revised Hidden Registry Strings - possible rootkit?
Misspelling in title
Apr
20
revised Password sent via email upon registration
Editing some language.
Apr
18
revised how can you view an HTTP request in transit?
Addressing the actual question.; added 41 characters in body
Apr
18
revised Could Nmap scan switches/routers
Grammar/spelling, ease of readability. Adding tag.
Apr
13
revised Dangers of opening up a wide range of ports? (mosh)
Brought back from being deleted; it is somewhat useful as it discusses the role of the OS in the network stack.
Apr
12
revised Is there a crypto system which detects decryption somewhere between sender and receiver?
added 9 characters in body